CVE-2026-112778

The Traefik ingress controller (versions before 2.11.46 , 3.x before 3.6.17 , and 3.7.0 ) is vulnerable to a cross-namespace resource reference issue within the Kubernetes Ingress provider . The root cause is a lack of namespace validation for Ingress and Service annotations. This allows an attac...